Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
File: xC4WYonhwfw6mLVFQLzHMUbXSII.mft (raw, json)
Hash identifier: PXsIfsSrcYwB1qBwt5h6cT/zhwn+KkokeN0YhUiLSBM=
Subject key identifier: FC:62:BE:00:03:00:D1:36:04:C1:B3:38:CB:81:BD:AF:4B:A2:2E:DD
Authority key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
Certificate issuer: /CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Certificate serial: 019E7C9F2CA4B060B0B9D53E1E70B6704FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
Manifest number: 0137
Signing time: Sun 31 May 2026 06:01:06 +0000
Manifest this update: Sun 31 May 2026 06:01:06 +0000
Manifest next update: Mon 01 Jun 2026 06:01:06 +0000
Files and hashes: 1: Lte9ihIhwLMJEwykODf0-Ea8xPQ.roa (hash: v/rTSSPoZthEpEjHR7Sqj/7dnyWCaWiGBnHcyQGxAwA=)
2: xC4WYonhwfw6mLVFQLzHMUbXSII.crl (hash: mUkBiRZCwYUtKkL4A5dIs7u+KFH7InUI51VjQK07HvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:9f:2c:a4:b0:60:b0:b9:d5:3e:1e:70:b6:70:4f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Validity
Not Before: May 31 06:01:06 2026 GMT
Not After : Jun 1 06:01:06 2026 GMT
Subject: CN=fc62be000300d13604c1b338cb81bdaf4ba22edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:ff:de:f6:88:f4:34:95:0c:1c:90:21:06:
fa:30:34:93:dc:8f:b3:52:0d:03:50:e8:16:dc:f0:
73:92:13:4f:72:58:7f:2a:57:89:88:f3:18:2d:2c:
c2:7a:9a:35:7b:a5:65:73:e5:7e:01:c7:09:24:d0:
b9:b1:ce:99:39:89:a0:63:cf:ad:4d:ab:7b:57:7e:
23:9c:9a:28:7b:a8:ff:18:e4:50:9e:00:90:cf:09:
47:fb:c7:cd:4b:53:84:64:1b:44:b2:1e:5e:6f:42:
0b:c3:11:55:fd:e7:f1:6e:22:a4:d2:c8:c1:97:b8:
30:eb:60:bf:5c:75:67:45:44:7f:3f:7a:aa:af:ba:
63:68:46:38:0b:db:01:4a:89:2d:a4:27:d5:45:e6:
d8:9b:81:9f:61:1b:d3:05:b4:df:b9:eb:a4:4f:b8:
3e:45:90:fb:b3:7b:d4:ad:45:fa:02:94:8a:06:c3:
4a:3d:57:d7:b2:e6:01:51:8e:1c:c6:55:ae:ab:4c:
54:30:07:ee:5d:e4:2b:aa:0e:fe:68:41:42:fd:9e:
5a:b8:48:b5:cd:e5:21:3a:2f:31:19:12:4a:09:a4:
e0:8f:d0:89:bf:6a:b3:49:14:5a:7b:46:64:43:03:
7a:59:3e:bc:92:6e:d8:19:74:4f:d3:34:bf:66:52:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:BE:00:03:00:D1:36:04:C1:B3:38:CB:81:BD:AF:4B:A2:2E:DD
X509v3 Authority Key Identifier:
keyid:C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:48:be:d2:c8:00:92:b9:76:4d:77:89:8d:4c:95:be:58:79:
b1:d6:8f:10:88:49:cc:ae:5a:dc:e7:8f:84:17:24:e0:38:c8:
12:68:58:d1:f7:a2:4e:d7:bc:fc:97:a0:35:49:65:cc:cd:43:
b4:15:9e:09:14:52:49:f2:b6:7d:74:26:50:38:2d:9a:a5:df:
61:2f:9a:6a:00:cb:e6:d5:b1:23:d8:df:c1:6f:9f:47:5c:16:
ce:63:59:b8:52:51:1b:5d:06:37:05:07:6d:ab:86:4e:ad:1a:
fc:8a:c8:79:88:cc:b8:d5:e3:3b:9f:7c:42:22:9b:c5:0b:b3:
69:c6:bf:8f:81:e2:f2:f8:d5:35:ea:f8:88:19:9d:5e:68:f0:
39:f0:27:ab:5e:27:d3:0a:c9:00:50:2d:7b:4d:a6:51:90:42:
25:d0:96:92:78:13:3a:87:cf:5b:43:70:b6:78:0a:5c:a0:3d:
f1:19:64:b7:1f:6e:72:d7:b6:0b:8e:e7:5b:67:ba:64:51:31:
24:e4:27:e0:42:58:0d:5e:70:e4:7c:c1:6c:96:67:72:84:91:
89:a3:49:ff:d1:c8:c9:1d:bf:bb:9f:ea:a2:75:35:40:72:5f:
3f:a0:d0:b4:6c:70:a4:89:e1:cf:b7:47:3f:89:26:84:16:bb:
cc:21:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 11:18:16 2026 by rpki-client